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AMENDMENTS TO THE CLAIMS : 

Applicant proposes cancelling claim 26 and amending claims 24, 27, 28, and 39 as 
detailed below. This listing of claims will replace all prior versions and listings of claims in the 
application: 

Listing of Claims : 
1.-23. (Canceled) 

24. (Currently Amended) A method for cipher controlled exploitation of data resources stored in 
a remote database associated with a computer system, the method comprising the steps of: 

providing a subscriber identity module carrying at least one security algorithm, said 

subscriber identity module not used, either directly or indirectly, by said computer 
system for communication with a network; 

producing a cipher key via said at least one security algorithm; 

using said cipher key for protecting said data resources; and 

storing said protected data resources in said remote database in an encrypted fonnat^ 
wherein producing the cipher key comprises generating at least two random 
values, subjecting said at least two random values to said at least one security 
algorithm to generate at least two session keys, and combining said at least two 
session keys via a mixer function to produce a cipher key . 

25. (Previously Presented) The method according to claim 24, wherein said step of using said 
cipher key for protecting said data resources comprises the steps of: 

encrypting said data resources by means of said cipher key; 
storing said encrypted data resources in said remote database associated with said 
computer system; 
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retrieving said encrypted data resources fiom said remote database; and decrypting said 

encrypted data resources by means of said cipher key. 

26. (Cancelled). 

27. (Currently Amended) A method for cipher controlled exploitation of data resources stored in 
a remote database associated with a computer system, the method comprising the steps of: 

providing a subscriber identity module carrying at least one security algorithm; 

producing a cipher key via said at least one security algorithm, wherein producing the 
cipher key comprises: generating at least two random values[[;]]i subjecting said 
at least two random values to said at least one security algorithm to generate at 
least two session keys[[;]]i and combining said at least two session keys via a 
mixer function to produce [[a]] the cipher key; 

using said cipher key for protecting said data resources; and 

storing said protected data resources in said remote database in an encrypted format. 

28. (Currently Amended) The method according to claim [[26]] 24, wherein said mixer function 
comprises a hash function. 

29. (Previously Presented) A method for cipher controlled exploitation of data resources stored 
in a remote database associated with a computer system, the method comprising the steps of: 

providing a subscriber identity module carrying at least one security algorithm; 
generating at least one random value; 

subjecting the at least one random value to the at least one security algorithm to generate 

at least one session key; 
providing a mixer function; 
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inserting in the mixer function a user specific secret unrelated to said subscriber identity 

module security algorithm; 
processing the at least one session key via the mixer function to produce a cipher key, 

wherein the cipher key is a function of both the user specific secret and the at least 

one session key; 
using said cipher key for protecting said data resources; and 
storing said protected data resources in said remote database in an encrypted format. 

30. (Previously Presented) The method according to claim 24, comprising the step of selecting 
said data resources firom user sensitive data or user credentials. 

3 1 . (Previously Presented) The method according to claim 30, wherein said step of using said 
cipher key for protecting said data resources comprises the step of encrypting by means of said 
cipher key, said user sensitive data or said user credentials from plain text into an encrypted 
format. 

32. (Previously Presented) The method according to claim 31, wherein said step of using said 
cipher key for protecting said data resources comprises the step of decrypting by means of said 
cipher key said user sensitive data or said user credentials fi-om an encrypted format into plain 

text. 

33. (Previously Presented) The method according to claim 31, wherein said user sensitive data 
or said user credentials in encrypted format have a cryptographic header associated therewith. 

34. (Previously Presented) The method according to claim 33, wherein said cryptographic 
header comprises an identifier of said subscriber identity module and a cryptographic checksum 
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based on said cipher key, said cryptographic checksum being used for detecting any 

unauthorized modifications of said encrypted format. 

35. (Previously Presented) The method according to claim 30, wherein said data resources are 
user credentials and said data resources based on said user credentials are stored in said remote 
database in an encrypted format. 

36. (Previously Presented) The method according to claim 35, comprising the step of 
establishing a relationship between said user credentials stored in said encrypted format in said 
remote database and a corresponding user subscriber identity module. 

37. (Previously Presented) The method according to claim 36, wherein said relationship is 
established by means of an identifier of said subscriber identity module. 

38. (Previously Presented) The method according to claim 37, comprising the step of using said 
identifier for searching within said remote database to permit user exploitation of said user 
credentials. 

39. (Currently Amended) A system for cipher-controlled exploitation of data resources, 
comprising: 

at least one subscriber identity module carrying at least one security algorithm; 

at least one computer system comprising at least one processing module, said subscriber 
identity module not used, either directly or indirectly, by said at least one 
computer system for communication with a network and said at least one 
processing module being interfaced with said at least one subscriber identity 
module to generate a cipher key via said at least one security algorithm and being 
configured to protect via said cipher key said data resources; and 
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a remote database associated with said at least one computer system for storing said 

protected data resources by said cipher key in an encrypted format , wherein 

generating the cipher key comprises generating at least two random values, 

subjecting said at least two random values to said at least one security algorithm 

to generate at least two session keys, and combining said at least two session keys 

via a mixer function to produce a cipher key . 

40. (Previously Presented) The system according to claim 39, wherein said at least one 
processing module is configured for: 

encrypting said data resources by means of said cipher key; 

storing said encrypted data resources in said remote database associated with said at least 

one computer system; 
retrieving said encrypted data resources from said remote database; and decrypting said 
encrypted data resources by means of said cipher key. 

41 . (Previously Presented) The system according to claim 39, wherein said remote database is 
included in said at least one computer system. 

42. (Canceled) 

43. (Previously Presented) The system according to claim 39, wherein said at least one 
processing module is interfaced with said at least one subscriber identity module via a smart card 
reader or a Bluetooth mobile terminal or an IrDA mobile terminal or a mobile terminal through a 
cable. 

44. (Previously Presented) The system according to claim 39, wherein said at least one computer 
system comprises a personal computer or a notebook or a laptop or a PDA, or a smart phone. 
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45. (Previously Presented) A communication network comprising a system according to 
claim 39. 

46. (Previously Presented) A non-transitory computer readable medium encoded with a 
computer program product loadable into a memory of at least one computer, the computer 
program product comprising software code portions for performing the method of claim 24. 
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